Thanks for the quick reply Torben. As well as your link states, a couple of years ago we had an external security audit and had to enhance the way cookies were managed. Dave's patch was very useful when using secure connections and also to get a better understanding of the sec handler, session cookies and login cookies.